CVE-2026-3778 in Foxit PDF Editor
摘要 (英语)
The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted that reference each other in a loop, passing the document to APIs (e.g., SOAP) that perform deep traversal can cause uncontrolled recursion, stack exhaustion, and application crashes.
负责
Foxit
预定
2026-03-08
披露
2026-04-01
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354528 | Foxit PDF Editor/PDF Reader 拒绝服务 | 674 | 未定义 | 未定义 | CVE-2026-3778 |